On Tue, Mar 27, 2018 at 11:16:01AM -0400, Endi Sukma Dewata wrote: > Hi, > > The Dogtag PKI Website URL has changed as follows: > > * Old URL: http://pki.fedoraproject.org > * New URL: http://www.dogtagpki.org > > Please use the new URL whenever possible. The old URL should > automatically be redirected to the new URL, so all existing links > should continue to work. > > Unfortunately, there was a glitch during the transition yesterday > causing it to be redirected to redhat.com. If you are experiencing > this, you may need to clear the browser cache/history. Please refer > to your browser's documentation since the steps are browser-specific. > > Sorry for the inconvenience. Thanks! > Thanks for the update, Endi. Now that the domain change is done, what needs to be done to enable TLS? Thanks, Fraser

On Tue, Mar 27, 2018 at 09:52:22PM -0400, Endi Sukma Dewata wrote: > ----- Original Message ----- > > On Tue, Mar 27, 2018 at 11:16:01AM -0400, Endi Sukma Dewata wrote: > > > Hi, > > > > > > The Dogtag PKI Website URL has changed as follows: > > > > > > * Old URL: http://pki.fedoraproject.org > > > * New URL: http://www.dogtagpki.org > > > > > > Please use the new URL whenever possible. The old URL should > > > automatically be redirected to the new URL, so all existing links > > > should continue to work. > > > > > > Unfortunately, there was a glitch during the transition yesterday > > > causing it to be redirected to redhat.com. If you are experiencing > > > this, you may need to clear the browser cache/history. Please refer > > > to your browser's documentation since the steps are browser-specific. > > > > > > Sorry for the inconvenience. Thanks! > > > > > Thanks for the update, Endi. > > > > Now that the domain change is done, what needs to be done to enable > > TLS? > > > > Thanks, > > Fraser > > I think Matt/Nathan is in the process of getting an SSL cert, unless > there's an easy way to use Let's Encrypt? > We should be able to use the ACME HTTP or DNS challenges to get a certificate from Let's Encrypt. Not sure which would be easiest to get going (and automate) on OpenShift. Here's a recently published article on the official OpenShift blog about it: https://blog.openshift.com/lets-encrypt-acme-v2-api/ It's a shame OpenShift Online hasn't got automatic OOTB TLS support via ACME/LE yet. I have them a heads-up years ago. We are behind the competition. Cheers, Fraser